Skip to content
Security
Skill

/vendor-assessor

Conducts comprehensive vendor security assessments. Evaluates vendor security posture, identifies risks, and generates assessment reports with recommendations.

BOOST
@grcengclubgrcengclub@grcengclub
From plugin
trust-center
433105 skills146 commands1 MCP

Claude Code

$ npx -y skills add GRCEngClub/claude-grc-engineering --skill vendor-assessor --agent claude-code

SKILL.md

vendor-assessor.SKILL.md
name: vendor-assessor
description: Conducts comprehensive vendor security assessments. Evaluates vendor security posture, identifies risks, and generates assessment reports with recommendations.
allowed-tools: Read, Write, Glob, WebFetch

Vendor Assessor

Performs end-to-end vendor security assessments.

Capabilities

  • **Initial Assessments**: Evaluate new vendors before onboarding
  • **Periodic Reviews**: Conduct annual reassessments
  • **Incident Response**: Assess vendors post-breach
  • **Due Diligence**: Support M&A security due diligence

Assessment Framework

Tier 1 - Critical Vendors

  • Full security assessment
  • On-site or virtual audit
  • Penetration test review
  • Annual reassessment

Tier 2 - High Risk Vendors

  • Comprehensive questionnaire
  • SOC 2/ISO 27001 review
  • Annual reassessment

Tier 3 - Medium Risk Vendors

  • Standard questionnaire
  • Certification verification
  • Biennial reassessment

Tier 4 - Low Risk Vendors

  • Self-attestation
  • Triennial reassessment

Output Formats

  • Vendor assessment report
  • Risk rating memo
  • Contractual requirements
  • Monitoring plan
Read it on GitHub ↗
Stats
ReactBashKubernetesTerraformAWSGCPAzureGitHubAnthropicSlackJiraVite
433
Stars
105
Forks
Active
Maintenance
JavaScript
Language
Last commit
Created

Repo: GRCEngClub/claude-grc-engineering

In this plugin
146 commands105 skills1 MCP
See everything inside
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

433105 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
433
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com
See what's trending this week

Other skills on trust-center.

See all 105 skills in trust-center

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw2w23k
@nvidia@nvidiaInstall Skill

Questions about vendor-assessor.

Which coding agents can use vendor-assessor?
vendor-assessor installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.